Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: 6GZiNWVs+x18YfEcb5MGojGxA1acn1rD2UVNpj8dcbA=
Subject key identifier: 2B:11:7D:99:1A:2F:C3:2D:25:02:D1:81:25:D2:DC:E0:D6:40:58:85
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 019D2695BA726E3FA25EF79CF483FF0319FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 0FA3
Signing time: Wed 25 Mar 2026 20:00:39 +0000
Manifest this update: Wed 25 Mar 2026 20:00:39 +0000
Manifest next update: Thu 26 Mar 2026 20:00:39 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: dSckD/Ap016fxnk4Nncrok1yQogy/lfMgSjbvd348C0=)
2: GjbkJ49m1ylK_4cEmIWXPszPEDM.roa (hash: gxfEhCbhLA8o8by+I0tdbjJ2UvnCGKEhH4gj7vfErb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ba:72:6e:3f:a2:5e:f7:9c:f4:83:ff:03:19:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Mar 25 20:00:39 2026 GMT
Not After : Mar 26 20:00:39 2026 GMT
Subject: CN=2b117d991a2fc32d2502d18125d2dce0d6405885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:14:16:5d:55:fb:32:e1:96:63:1e:08:73:
7f:4d:70:bd:f2:b7:d5:66:c6:34:4e:af:2e:e6:6f:
2f:69:29:27:3f:d8:90:6b:94:73:ed:cc:6b:c0:f8:
6f:d3:fe:82:09:d1:c1:5b:75:de:ff:a8:95:c7:a0:
c3:ac:78:fc:2e:7a:ac:4a:02:48:0c:f3:21:bd:67:
09:78:14:5e:a8:f5:a5:1e:14:da:16:9c:7a:3d:7b:
26:db:7c:15:55:6c:03:4d:60:b1:14:eb:f2:de:e4:
a1:72:34:5e:23:37:67:7d:de:1e:dd:89:e1:31:3c:
12:9b:af:e8:64:b5:e5:47:84:63:f7:c5:37:fa:89:
b6:fb:6b:dc:92:81:0c:cf:c9:35:64:f3:e8:4c:87:
b0:fa:85:28:9f:76:02:3a:cf:0f:5b:82:f4:16:7b:
0a:1b:76:11:62:63:3b:ec:84:e6:b7:4c:88:89:50:
56:e5:f9:dd:be:5c:77:ec:cf:d6:46:29:a7:07:6b:
91:d6:c1:c7:d6:86:1a:7b:62:32:05:eb:d8:56:a7:
99:94:03:3c:8d:cf:2b:72:16:f8:4c:6f:ca:83:30:
ca:94:b4:42:60:a8:ee:4d:a3:8d:87:ad:cf:92:0a:
e9:cd:1b:c2:bd:5d:09:29:42:6a:a0:00:9a:3a:e6:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:7D:99:1A:2F:C3:2D:25:02:D1:81:25:D2:DC:E0:D6:40:58:85
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b4:d2:0f:0a:84:90:dc:a9:0c:de:7b:65:6a:2d:21:39:8e:
5e:94:1a:f1:bc:38:14:7b:07:a7:f5:da:13:c1:2c:20:02:e4:
e9:48:a9:b0:e9:87:75:92:67:ba:f6:67:69:70:1d:a9:fa:05:
26:bc:6d:c7:7e:a7:5f:76:8c:02:78:c5:14:21:c7:7b:88:6f:
2f:5d:e8:4d:dc:77:59:5d:ef:85:9b:c6:09:82:af:86:c9:a0:
da:f1:13:8c:f3:ff:a8:60:9c:f7:f7:3f:4e:3c:82:c8:2c:cc:
d8:1a:3b:32:79:9d:ec:a8:76:6b:fd:28:a5:a6:94:15:96:46:
b3:7f:83:e6:8a:5e:7b:fd:ab:88:cb:19:b7:ed:15:9f:e9:2b:
c3:7e:9b:b0:be:56:f5:ed:30:e0:61:c8:69:8d:30:a7:5d:7a:
66:91:b5:9b:6c:0e:1e:bd:4d:87:4c:e6:29:9b:ff:2b:aa:f9:
58:ce:15:4c:bc:36:64:fe:59:06:dd:90:be:ad:5a:69:69:8e:
04:e5:13:ba:9d:fc:a1:7f:df:08:45:b0:3e:00:c0:cf:3e:05:
23:1d:d7:c4:fd:40:f9:f7:50:b5:65:1e:29:af:66:89:47:15:
b3:44:ad:f6:81:80:75:50:a2:b2:91:58:33:6b:db:bb:75:d1:
d5:7d:df:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:43 2026 by rpki-client